TLDR
- KelpDAO’s rsETH bridge suffered a $292–$293 million exploit that sparked mass withdrawals from Aave, removing over $15 billion from the platform.
- Major lending markets on Aave reached 100% utilization, trapping approximately $5 billion in USDT and USDC with withdrawals impossible.
- The platform’s total value locked plummeted from $48.5 billion to approximately $30.7 billion — losing roughly one-third of its value within days.
- CertiK researcher Natalie Newson cautioned that Aave’s “self-defense systems are down,” allowing bad debt to accumulate.
- The AAVE token hovers around $91, maintaining position just above the $90.47 support zone, facing resistance at $98.80.
Aave, among the leading decentralized lending platforms in DeFi, confronts a severe liquidity emergency following a hack on an external protocol that set off a cascade freezing its primary markets.
The crisis began on April 18, when malicious actors discovered and exploited a weakness in a LayerZero V2 bridge connecting Unichain and Ethereum. The exploit enabled them to extract approximately $293 million worth of rsETH from Kelp DAO while leaving the corresponding tokens unburned on the originating chain.
The compromised tokens subsequently entered Aave V3 as collateral. The exploiter leveraged them to secure nearly $200 million in WETH loans. Once word circulated about the unbacked collateral backing these positions, users initiated rapid fund withdrawals.
Within a single 24-hour period, Aave witnessed departures exceeding $6.6 billion. High-profile entities including Justin Sun and the MEXC exchange numbered among those extracting substantial amounts. The ETH market reached 100% utilization initially, with USDT and USDC pools following soon after.
When a lending protocol reaches 100% utilization, all available liquidity vanishes. Users lose withdrawal capabilities, and the platform cannot execute liquidations.
DeFi analyst DeFi Warhol described the situation clearly: “It actually means no liquidity available for withdrawals. Liquidations can’t be processed.” He noted that approximately $3 billion in USDT and $2 billion in USDC remain trapped without viable exit routes.
Protocol Defense Mechanisms Disabled
Natalie Newson, a senior blockchain security researcher at CertiK, indicated the circumstances place Aave in critical jeopardy.
“100% utilization doesn’t just mean a lack of liquidity; it means the protocol’s self-defense systems are down,” she explained. The absence of liquidity prevents undercollateralized positions from closing, causing bad debt to mount continuously.
Newson clarified that Aave itself experienced no direct breach. “It got stuck due to the fallout from someone else’s bridge failure,” she stated. LlamaRisk projected bad-debt scenarios spanning from $123.7 million to $230.1 million.
Aave’s governance structure responded swiftly — implementing rsETH reserve freezes, reducing loan-to-value ratios to zero, and modifying interest rates. The TVL damage, however, had already materialized.
Funds Migrate to Rival Platforms
AmberCN disclosed on April 22 that cumulative outflows from Aave across three and a half days totaled $15.1 billion. TVL contracted from $48.5 billion to $30.7 billion.
Morpho similarly experienced $1.5 billion in departures. SparkLend, meanwhile, attracted $1.3 billion in new deposits — with some capital suspected to originate from the same large holders who departed Aave.
Aave’s on-chain revenue declined from $1.1 million in early February to $625,000 as of Monday.
Aave founder Stani Kulechov, responding to inquiries from CoinDesk, stated: “I do not have anything useful to say.”
The AAVE token currently trades around $91.22, maintaining position just above the critical support level at $90.47. Resistance remains at the 20-day EMA near $98.80.
